Server kiilub kinni 1-2 sek

[Kummijummi 0]

Millest võib olla tingitud see, et server kiilub iga roundi alguses ~1 sekiks kinni?

[olleJel 0]

Mis server?

[Kummijummi 0]

Mis server?

official

[KaarelVDesigns 11]

Logides pole kirjas??

[Kummijummi 0]

Logides pole kirjas??

ei, ainuke imelik asi mis sinna nyyd tekkinud on, on see "[DPROTO]: traffic temporary blocked from 174.51.174.148 for flooding" ja neid ridu on seal sadu erinevate ipdega

[KaarelVDesigns 11]

See võibgi põhjustada kiilumise. Googelda seda või otsi mingi targem inimene kes jagab seda.

[Prosinec 0]

ei, ainuke imelik asi mis sinna nyyd tekkinud on, on see "[DPROTO]: traffic temporary blocked from 174.51.174.148 for flooding" ja neid ridu on seal sadu erinevate ipdega

 

Meil serveritel samamoodi.. http://vahvel.net/showthread.php?150184-Flood

[Kummijummi 0]

Meil serveritel samamoodi.. http://vahvel.net/showthread.php?150184-Flood

okei, ma ise m6tlesin ka, et peale seda ongi server nagu jamama hakanud, olen proovinud ka dprotot vahetada, aga siiamaani pole aidanud

[Caffe 0]

Because of my hands growing from ass it's possible to use running HLDS servers with dproto as an amplification point of reflected DDoS attacks (with source IP spoofing).

The picture below explains what I'm talking about:

 

As you can see, amplification ratio is 2000 to 60, so hacker can generate ~2Gbit/sec of UDP flood on victim with only 60Mbit/sec utilization of his internet channel. Normally, this should not happen because server should check if this particular client is allowed to send a request that generates large answer. This is done by "challenges" system:

1. First, client sends a "challenge request" request.

2. Server generates random number called "challenge" and assigns it with client's ip and returns to client.

3. Any other requests from client should be sent with challenge number returned by server. Server must check that challenge in those requests is the same as challenge assigned to client's IP.

The problem is that challenge checking is not implemented in dproto. 0.9.177 build fixes that.

 

Sa ei saa muud teha, kui uuendada oma HLDS buildi ja panna peale kõige uuem dproto, mis eemaldab sinu 'botnetist', mida kasutatakse serverite ründamiseks. Packeteid saadetakse sinu serveri IP-le ikkagi, aga hacker ei saa kasutada sinu serverit ründamiseks. (http://cs.rin.ru/forum/viewtopic.php?f=29&t=55986)

[AMG 10]

Meil serveritel samamoodi.. http://vahvel.net/showthread.php?150184-Flood

Sama teema, siianii pole korda saanud kui vaadanud igasuguseid õpetusi, help ;!

 

Vahetasin dproto ära, uuendasin servud. still not working :S